CVE-2021-24309CWE-79

Weekly Schedule < 3.4.3 - Authenticated Stored XSS

published June 1, 2021

CVSS
—
EPSS
1%
Percentile
50.5
In the wild
Unconfirmed
What it is

The "Schedule Name" input in the Weekly Schedule WordPress plugin before 3.4.3 general options did not properly sanitize input, allowing a user to inject javascript code using the <script> HTML tags and cause a stored XSS issue

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00650 · 50.5th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2021-06-01T11:33Z
EPSS history
Timeline
  • 01 JUN 11:33Z
    Weekly Schedule < 3.4.3 - Authenticated Stored XSS
    cvelistv5